| Package | Affected versions | Patched versions |
|---|---|---|
| ampache | = 3.4.1 |
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free